---
id: 4373
title: "[CVE-2010-2568] How malware authors play with the LNK file format"
cve: CVE-2010-2568
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/how-malware-authors-play-with-the-lnk-file-format.html"
published_at: "2024-05-29T22:00:00Z"
tags: ["malware", "windows", "threat-analysis", "file-format", "lnk", "stuxnet"]
phying_url: "https://phying.com/item/4373"
lang: en
---

# [CVE-2010-2568] How malware authors play with the LNK file format

## Summary

A study of how malware abuses Windows LNK shortcut files for delivery, from Stuxnet's CVE-2010-2568 to today's macro-replacement campaigns by Qakbot, IcedID and Emotet.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2010-2568
- **Published:** 2024-05-29T22:00:00Z
- **Original:** https://blog.quarkslab.com/how-malware-authors-play-with-the-lnk-file-format.html
- **Phying News:** https://phying.com/item/4373